www.basingstokerecruitmentagency.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:47:a1:bd:22:05:d9:0b:f3:25:d4:46:97:a6:fd:da:b2:30 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.basingstokerecruitmentagency.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:47:a1:bd:22:05:d9:0b:f3:25:d4:46:97:a6:fd:da:b2:30
Serial Number (int): 372824179519920492060630745029284942492208
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6a:a9:77:05:9a:f5:d5:77:2a:cf:64:da:77:30:8b:4b:02:8d:4a:bf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 81:50:f3:c8:f6:23:ab:10:f5:65:83:9c:ad:52:cf:a7:cb:7f:0b:dc
Fingerprint (sha256): 95:7f:85:6c:1b:e7:6c:da:a0:cd:b1:da:a8:ad:be:ea:55:66:dc:74:fa:5a:b5:a5:c7:a6:c5:0e:cb:0b:06:b1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.basingstokerecruitmentagency.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.basingstokerecruitmentagency.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.basingstokerecruitmentagency.co.uk

Other certificates including the domain name basingstokerecruitmentagency.co.uk

(limited to 100 certificates)
www.basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk

Certificate

The complete raw certificate details for www.basingstokerecruitmentagency.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372824179519920492060630745029284942492208
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-24 13:55:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-22 13:55:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.basingstokerecruitmentagency.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1003479028360365267707481509105072279446544833255128058115845984520100695603172124917726722317689309900613524756828979817024788571855544574871191586064112900078061245920795858982780867664701284812240125504234943780046494847784717787234832089987045317319685002653838157855531445222458868603747997258877175798400382992806977470898748813102835622216055906307520740814746895399390709166723115655897643590892649268022090960242012820332719049861202146780258364009016870168333862794064989291258022856501621303469075538355892334043802529923582398477595866806141819623185297283014689604384114969861581332145322285347009535351067122017624745560493915677570342745754880731783265509050546807829365429379305281911961912474904911741842364462181654740524232360662512909647923093750591425463838033517054273019058550538260030065237862383657159093169904490203978472695568367624916571565613224006338893091577246847885666069841414066775819980132672967180417440714138412434555225575071494594662865685154280899811299060824045169176059006080562554313130829874318960426067774766692102553579645879662696442121525752898978105087743787269289186440359031326833391067260174981271561418806834304495135621275658340772264708010942845746082866188971326872761018992509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6aa977059af5d5772acf64da77308b4b028d4abf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basingstokerecruitmentagency.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b89fbc6590000040300483046022100e5168468d5eca59e1780525d3b9a8621e949036977351b3f3f84dff2d458a4ce022100fc991ffd3268e5737024bac991f90487c3ad686f1aa304bbf18bcbccd012fa1a007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b89fbc65a0000040300483046022100ffe882fa64477a7772d652558dd4ab7732766b4384b80339b4678499a980da95022100ec2f2f1230ab647b8458cc8365a4646c4b700730075c2c7f070f2c6334b35a11
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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